CVE-2013-2259 - Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

CRITICAL

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

Published Nov 4, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 3.67%

Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Cryptocat	Cryptocat	unknown	Affected before 2.0.22

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2205		Advisory
https://tobtu.com/decryptocat.php		x_refsource_MISCProduct
https://www.openwall.com/lists/oss-security/2013/07/10/15		x_refsource_MISCMailing ListThird Party Advisory
https://www.securityfocus.com/bid/61089		x_refsource_MISCThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Nov 4, 2019

Updated Aug 6, 2024

Reserved Feb 19, 2013

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Red Hat

No data

ENISA EUVD

Assigner redhat

Published Nov 4, 2019

Updated Aug 6, 2024

GitHub

No data